$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft File: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json) Hash identifier: OtnM2WxOX0pCm3YsXtlmjRu7bCZZGuGqLL3vOVWO1fU= Subject key identifier: A1:E7:48:BC:F4:D7:7B:30:B0:AF:0E:E1:14:DE:AC:7E:A4:19:E9:DC Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5 Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5 Certificate serial: 2703 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft Manifest number: 26D0 Signing time: Wed 18 Jun 2025 15:41:00 +0000 Manifest this update: Wed 18 Jun 2025 15:41:00 +0000 Manifest next update: Wed 25 Jun 2025 15:41:00 +0000 Files and hashes: 1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: GO7ByMQvgPX63oWrqdXy30f9XWN/u1AXHMFAtLIwDao=) 2: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: YRyAIa+9kqjeJON/+m339DSD36eJAdvbC6dlw8cArb0=) 3: A9756862B14111E5A3B46B15C4F9AE02.roa (hash: 6cPmLBt1sBShuvLwWvNO41Ns1T1kiJK04bj8/jgFuvI=) 4: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zljvCYtPHGxkTjF0cJrDQGngJEaHA+QSXJeZL2Snd8A=) 5: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: 5DmpgkEHXaDkkR9mgpZabmssGePTrFoLLGp9YTKRdHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 15:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9987 (0x2703) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5 Validity Not Before: Jun 18 15:41:00 2025 GMT Not After : Jun 25 15:41:00 2025 GMT Subject: CN=6852de0c-8895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f1:47:ee:03:95:ef:a7:bb:b6:76:2a:89:bc: 78:89:44:d5:3a:38:0f:f9:c7:1c:dd:4a:63:14:5a: fb:3b:c4:df:2b:84:50:65:e7:ed:05:6a:29:cc:4c: bd:b9:b3:36:60:a2:c4:14:af:f2:3b:66:67:53:fe: ee:f2:1f:bc:4a:72:c0:74:0e:80:cd:84:6f:75:82: e7:2b:31:9e:14:aa:10:ee:a0:af:67:6c:7d:a5:b3: 39:88:1c:fd:fd:4d:f3:2b:df:b3:cf:b9:74:60:aa: 18:a9:a9:28:83:bb:2d:29:35:83:0e:4b:53:cc:a1: 02:e8:c1:51:61:1e:db:7d:88:d8:be:87:1b:13:cb: e9:75:2b:e0:76:1b:08:02:f8:b1:57:4c:fb:5d:60: 82:f5:e8:8f:75:d3:a0:09:4d:7b:14:55:00:e4:5a: fe:9c:7f:60:28:58:db:95:f0:f0:1a:26:ad:78:b7: 85:30:b5:9c:f3:c0:33:bb:42:df:78:c5:8d:1b:4c: 62:27:69:e0:24:70:73:f2:42:d8:fb:8d:26:17:9f: 5e:38:12:14:4b:56:f3:47:96:8c:18:ee:15:da:0e: 2c:ec:3e:d0:63:a4:d1:d7:6c:0d:48:43:a7:91:d3: 37:c5:42:24:dc:b3:60:7b:c7:46:d9:96:c8:57:fb: 10:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E7:48:BC:F4:D7:7B:30:B0:AF:0E:E1:14:DE:AC:7E:A4:19:E9:DC X509v3 Authority Key Identifier: keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:cf:f3:24:f0:92:6a:9b:17:d2:b0:d5:f5:1e:b5:41:2a:f0: 58:59:12:0f:c8:0a:6f:14:96:c0:87:06:ba:e5:a1:ab:e4:f9: bb:db:42:10:d6:cf:35:45:cd:2f:8c:08:1c:28:57:f2:b5:10: 44:d3:3a:fc:1a:8a:1a:f2:f1:63:fb:9c:2b:e7:d3:88:da:5f: c3:76:20:5c:82:13:7f:4f:53:04:2d:7b:29:19:35:13:47:c8: bd:41:c3:27:18:96:2d:1d:64:53:89:af:e1:24:56:cf:77:7e: 48:2d:71:ce:9d:2d:b8:14:7d:d9:a2:23:02:22:5b:71:c2:46: c2:ba:20:dd:04:b4:1b:5b:4b:f1:9d:f9:5c:0b:f6:6f:a5:be: df:f5:43:aa:de:c5:35:1e:9f:6a:39:26:17:99:bf:7e:49:99: b0:c8:cc:f6:26:06:4f:fd:f9:c3:82:b9:d5:43:de:c9:84:d6: bb:1e:f5:7d:97:a0:30:12:2f:c5:53:4d:73:5b:0b:8e:8e:d0: 8e:56:1b:25:2d:0a:39:09:d1:4c:59:00:92:1a:ed:2c:ec:c9: 59:f4:22:f8:65:11:6e:f0:e5:e9:c7:6d:02:c6:f9:09:ab:75: 57:50:95:84:69:4a:14:64:64:d7:0e:5b:3c:fb:4b:2b:6c:05: 6a:ac:c0:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYyMkYxMTAvBgNVBAUTKEUwOEFDNTUwMEUxRkYxOEZENUQ1MkI3OTdDNTA5N0RE MEFCOTRCRTUwHhcNMjUwNjE4MTU0MTAwWhcNMjUwNjI1MTU0MTAwWjAYMRYwFAYD VQQDEw02ODUyZGUwYy04ODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5fFH7gOV76e7tnYqibx4iUTVOjgP+ccc3UpjFFr7O8TfK4RQZeftBWopzEy9 ubM2YKLEFK/yO2ZnU/7u8h+8SnLAdA6AzYRvdYLnKzGeFKoQ7qCvZ2x9pbM5iBz9 /U3zK9+zz7l0YKoYqakog7stKTWDDktTzKEC6MFRYR7bfYjYvocbE8vpdSvgdhsI AvixV0z7XWCC9eiPddOgCU17FFUA5Fr+nH9gKFjblfDwGiateLeFMLWc88Azu0Lf eMWNG0xiJ2ngJHBz8kLY+40mF59eOBIUS1bzR5aMGO4V2g4s7D7QY6TR12wNSEOn kdM3xUIk3LNge8dG2ZbIV/sQiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHnSLz0 13swsK8O4RTerH6kGencMB8GA1UdIwQYMBaAFOCKxVAOH/GP1dUreXxQl90KuUvl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIyRi82OTc1NDhDOERB Q0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZX1YxU3Q1ZkZDWDNRcTVT LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRJckZVQTRmOFlfVjFTdDVmRkNYM1FxNVMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjIyRi82OTc1NDhDOERBQ0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZ X1YxU3Q1ZkZDWDNRcTVTLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEz/Mk8JJqmxfSsNX1HrVBKvBYWRIPyApvFJbAhwa65aGr5Pm720IQ 1s81Rc0vjAgcKFfytRBE0zr8Gooa8vFj+5wr59OI2l/DdiBcghN/T1MELXspGTUT R8i9QcMnGJYtHWRTia/hJFbPd35ILXHOnS24FH3ZoiMCIltxwkbCuiDdBLQbW0vx nflcC/Zvpb7f9UOq3sU1Hp9qOSYXmb9+SZmwyMz2JgZP/fnDgrnVQ97JhNa7HvV9 l6AwEi/FU01zWwuOjtCOVhslLQo5CdFMWQCSGu0s7MlZ9CL4ZRFu8OXpx20CxvkJ q3VXUJWEaUoUZGTXDls8+0srbAVqrMCT -----END CERTIFICATE-----Generated at Thu Jun 19 11:08:44 2025 by rpki-client